1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
|
What is catlfish?
=================
Catlfish is an implementation of a
[Certificate Transparency](https://www.certificate-transparency.org/)
log.
The code
========
Current status
--------------
- There is no release for production use yet.
- Most current BETA release is catlfish-0.8.0.
- It's functional, RFC6962 compliant, distributable, Docker enabled.
Running it
----------
If you want to run your own log, you will need
[plop](https://git.nordu.net/?p%3Dplop.git%3Ba%3Dsummary) and
[catlfish](https://git.nordu.net/?p%3Dcatlfish.git%3Ba%3Dsummary)
from NORDUnet.
git clone https://git.nordu.net/plop.git
git clone https://git.nordu.net/catlfish.git
For build instructions, see [README](https://www.ct.nordu.net/README.html).
Understanding it
----------------
- [caltfish design doc](https://git.nordu.net/?p%3Dcatlfish.git%3Ba%3Dblob_plain%3Bf%3Ddoc/design.txt%3Bhb%3DHEAD)
- [plop database design](https://git.nordu.net/?p%3Dplop.git%3Ba%3Dblob_plain%3Bf%3Ddoc/db.md%3Bhb%3DHEAD)
Public test logs
================
- https://plausible.ct.nordu.net/
- onion service: http://plausibe7ba4mlsu.onion/
- log key: [pemfile](https://www.ct.nordu.net/plausible-logkey.pem)
- started: 2015-04-17
- note: should produce a new STH about once per hour
- note: running the latest release of catlfish (or newer)
- NOTE: flimsy.ct.nordu.net:8080 is not around anymore
Roadmap
=======
Please see
[catlfish Road Map](https://project.nordu.net/browse/CATLFISH#selectedTab%3Dcom.atlassian.jira.plugin.system.project%253Aroadmap-panel)
in the bug tracker.
Points of contact
=================
Mailing list
------------
- [catlfish](https://segate.sunet.se/cgi-bin/wa?A0%3Dcatlfish)
You have to be subscribed to the list in order to send email to the
list. Use the address catlfish -at- nordu.net to post to the list.
If you prefer email over the
[web interface](https://segate.sunet.se/cgi-bin/wa?A0%3Dcatlfish) for
joining the list, send an email to
[listserv@segate.sunet.se](mailto:listserv@segate.sunet.se) with
"subscribe catlfish" in the email body.
Bug tracker
-----------
We're using Jira, see
[project catlfish](https://project.nordu.net/browse/catlfish).
You can open a ticket by sending email to catlfish-bugs -at-
nordu.net.
In order to add more info to tickets you need to be logged in and use
the web interface. The following federations are accepted: Kalmar,
Google+, Facebook. A number of nordic universities are accepted in
addition to these federations, see the
[login page](https://crowd.nordu.net/Shibboleth.sso/DS/nordu.net?target%3Dhttps%253A%252F%252Fcrowd.nordu.net%252Fcrowd%252Fplugins%252Fservlet%252Fssocookie%253FredirectTo%253Dhttps%253A%252F%252Fproject.nordu.net%252Fsecure%252FDashboard.jspa)
for the complete list.
Chat
----
IRC: #ct @ OFTC.net
Other resources
===============
External
--------
- The IETF ['trans' working group](https://datatracker.ietf.org/wg/trans/charter/)
- Googles [Certificate Transparency](https://www.certificate-transparency.org/) web page
Presentations and abstracts
---------------------------
- [Catlfish -- An Implementation of Certificate Transparency in GN3+ (PDF)](https://www.ct.nordu.net/tnc15talk.pdf), abstract submitted to [TNC15](https://tnc15.terena.org/)
- [Public append-only logs (PDF)](https://www.ct.nordu.net/publogs-finse15.pdf), a presentation (May 2015) at [FRISC Finse Winter School](https://www.frisc.no/arrangementer/finse-winter-school-2015/)
- [Certificate Transparency (PDF)](https://www.ct.nordu.net/init15.pdf), a presentation (Nov 2015) at [Tech Day by Init](https://www.init.se/events/129-events/309-tech-day-by-init-2015)
- [Append-only verifiable logs for transparency and distributed trust (PDF)](https://www.ct.nordu.net/logs-tnc16-abstract.pdf), abstract submitted to [TNC16](https://tnc16.geant.org/)
|
